Parent/Child Page Permission Issue

Question

I am trying to create a Space that has View access for everything and Edit access to certain pages.

Config 1:

------------------------------------------------

Space Permissions: confluence-users: View All

Page Restrictions: Anyone can view, only some can edit

In this setup, I get the following error "No edit permissions in space. Contact a space admin."

------------------------------------------------

Config 2:

------------------------------------------------

Space Permissions: confluence-users: View All | Add Pages

Page Restrictions: Anyone can view, only some can edit

In this setup, it seems that nothing is restricted.  Everyone is able to Add child pages.

------------------------------------------------

Thanks in advance!

Jerome F__qhxqr1 · Answer

Anyone reading this is now realizing how poorly designed these permissions are.

No you're not dreaming, it is indeed mind-blowing, and in my experience, i've never seen a permission/inheritance system that is so badly thought.

To sum-up, if you want to have different permissions WITHIN a same space, you cannot restrain access on the space level then explicitly allow access on the page level, no you just can't, because the ALLOW permission, even tho it is applied directly on the page level, is getting overwritten by the space level DENY permission.

There's just NO LEVEL-BASED HIERARCHY in the permission scheme, the only hierarchy applying is the DENY permission over the ALLOW permission.

So about the previous example being that you want some users to be able to edit only certain pages within a space where they can't edit the other pages, it means that to achieve that you will need to ALLOW the access to these people on the whole space, and then manually add them a DENY permission on every page you don't want them to edit (and also remember to do it on each newly created pages).

This is SO BROKEN.
Who would come up whit that kind of permission system ? I don't even see the benefits of it (assuming there are some... lol)

Michael O_Pry · Answer

@Diego for step #4, are you stating doing this for every page or is there a setting for all pages?  I see your comment below saying every page, but Step 4 looks encompassing.

Diego_88dj6o · Answer

Hello @Michael O_Pry !

If I understand correctly, you need to have some pages open to be edited and others closed to edit.

* For you to achieve this, you could do this:
* Create a space (Or navigate into an already existing one)
* Add the editing permissions to the groups or individuals you need
* Add the “Anyone can view, some can edit” page restriction to all pages
* Go to the pages where you want people to be able to edit the pages
* Under the page restrictions, add the groups or individuals who you need to be able to edit said page

Page restrictions need to be applied to each and every page in the space for this to work.

For the pages which you need no one to be able to edit, leave only your name under the restrictions.

If you add the confluence-users under the Page restrictions using the "Anyone can view, some can edit" scheme, everyone under the confluence-users group will be able to edit the page.

You can check more details about permissions and restrictions here:

* [Confluence Cloud] What are Confluence Cloud permissions and restrictions?
* [Confluence Cloud] Add or remove page restrictions

Let us hear from you!